This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi

Iam developing custom dissector where in one of the part i need to dissect NAS message (3G based) 3gpp spec.

Does wireshark support nas dissection? If yes how do i call the dissector and what parameters to pass.

Thanks

Raj

asked 21 Oct '14, 12:03

umar's gravatar image

umar
26222427
accept rate: 0%


Yes it is supported. You just need to call the "gsm_a_dtap" dissector with a tvb containing the message payload.

permanent link

answered 21 Oct '14, 13:17

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%

Hi Pascal Quantin,

This Works for me :) Many Thanks!

Need to confirm, Instead of Header Name NAS Message : ------ it display as GSM A-I/F DTAP : --- ---

Iam looking for TS 24.008 version 4.3 Is there any other function i have to use instead of gsm_a_dtap??

Thanks!

Best Regards Raj

(22 Oct '14, 22:52) umar
1

If you look at the header of file packet-gsm_a_dtap.c you can see which specifications are covered, the info may not be up to date with the latest specs covered.

(23 Oct '14, 04:01) Anders ♦
1

It displays GSM A-IF DTAP because historically those dissectors were added for the corresponding network interface. As stated at the beginning of packet-gsm_a_dtap.c file:

Routines for GSM A Interface DTAP dissection - A.K.A. GSM layer 3

NOTE: it actually includes RR messages, which are (generally) not carried over the A interface on DTAP, but are part of the same Layer 3 protocol set

(23 Oct '14, 04:16) Pascal Quantin
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×16
×13

question asked: 21 Oct '14, 12:03

question was seen: 2,394 times

last updated: 23 Oct '14, 04:23

p​o​w​e​r​e​d by O​S​Q​A